Security Patches

Catalogic DPX 4.13 introduces the possibility to update base OS packages (security patches). The updates often fix known vulnerabilities and help protect the entire ecosystem from possible malfunctions. It is important to update the OS regularly.

There are two base OS update methods: online (basic) and offline (secondary).

Note. This section concerns base OS updates for DPX Master Server and DPX Proxy Server. For a similar process in vStor, see Security Patches in vStor 4.13 Documentation.

Online Update

  1. Log in to the DPX Master Server via SSH. See Connecting to DPX Master Server via SSH.

  2. Run yum update. You will require root privileges.

Catalogic-DPX                                          16 kB/s |  15 kB     00:00
Dependencies resolved.
=======================================================================================
 Package           Architecture     Version                  Repository           Size
=======================================================================================
Upgrading:
 bpftool           x86_64           4.18.0-553.58.1.el8_10   Catalogic-DPX       11 M

Transaction Summary
=======================================================================================
Upgrade  1 Package

Total download size: 11 M
Is this ok [y/N]: y
  1. Type y and confirm. The download and installation will continue.

Downloading Packages:
bpftool-4.18.0-553.58.1.el8_10.x86_64.rpm             4.2 MB/s |  11 MB     00:02
---------------------------------------------------------------------------------------
Total                                                 4.2 MB/s |  11 MB     00:02
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                              1/1
  Upgrading        : bpftool-4.18.0-553.58.1.el8_10.x86_64                        1/2
  Cleanup          : bpftool-4.18.0-553.53.1.el8_10.x86_64                        2/2
  Running scriptlet: bpftool-4.18.0-553.53.1.el8_10.x86_64                        2/2
  Verifying        : bpftool-4.18.0-553.58.1.el8_10.x86_64                        1/2
  Verifying        : bpftool-4.18.0-553.53.1.el8_10.x86_64                        2/2

Upgraded:
  bpftool-4.18.0-553.58.1.el8_10.x86_64

Complete!

The latest security patches are now installed and your base OS is up to date.

Offline Update

The offline update procedure has been developed for environments without direct internet access. This procedure requires another Linux machine with internet access and a way to transfer the downloaded archive to the DPX Master Server or DPX Proxy Server. The procedure is the same for both products, the only difference being the product name (dpx or proxy, respectively).

  1. Run wget https://yum.catalogicsoftware.com/dpx/4.13/offline_security_patch.sh for DPX Master Server (or wget https://yum.catalogicsoftware.com/proxy/4.13/offline_security_patch.sh for DPX Proxy Server). This command will download the appropriate script.

  2. Run the downloaded script with bash offline_security_patch.sh . The script will download the necessary updates and pack them into the DPX_4.13_offline_updater.tar.gz archive with all the security updates and guide you through the rest of the process. The following instructions will also be displayed in the terminal.

  3. Transfer the DPX_4.13_offline_updater.tar.gz file to the DPX Master Server system.

  4. On your DPX Master Server, create a directory for extraction, e.g. using: mkdir -p /tmp/offline_update.

  5. Extract the archive, e.g.: tar -xzf DPX_4.13_offline_updater.tar.gz -C /tmp/offline_update.

  6. Navigate to the directory where the archive has been extracted to: cd /tmp/offline_update.

  7. Run the update script (this will require root privileges): bash ./DPX_4.13_offline_rpm_updater.sh

Catalogic-DPX                                          16 kB/s |  15 kB     00:00
Dependencies resolved.
=======================================================================================
 Package           Architecture     Version                  Repository           Size
=======================================================================================
Upgrading:
 bpftool           x86_64           4.18.0-553.58.1.el8_10   Catalogic-DPX       11 M

Transaction Summary
=======================================================================================
Upgrade  1 Package

Total download size: 11 M
Is this ok [y/N]: y
  1. Type y and confirm.

Downloading Packages:
bpftool-4.18.0-553.58.1.el8_10.x86_64.rpm             4.2 MB/s |  11 MB     00:02
---------------------------------------------------------------------------------------
Total                                                 4.2 MB/s |  11 MB     00:02
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                              1/1
  Upgrading        : bpftool-4.18.0-553.58.1.el8_10.x86_64                        1/2
  Cleanup          : bpftool-4.18.0-553.53.1.el8_10.x86_64                        2/2
  Running scriptlet: bpftool-4.18.0-553.53.1.el8_10.x86_64                        2/2
  Verifying        : bpftool-4.18.0-553.58.1.el8_10.x86_64                        1/2
  Verifying        : bpftool-4.18.0-553.53.1.el8_10.x86_64                        2/2

Upgraded:
  bpftool-4.18.0-553.58.1.el8_10.x86_64

Complete!

The latest security patches are now installed and your base OS is up to date.

Last updated